55c4dc774aa819a13fb0262e3966634e181ba71bec1ff23d51e8b2555d0735ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5051b91f5c7c8c5ed08a2558fe4bb9a_JaffaCakes118
Size

40KB
Sample

240818-ct8y3atarn
MD5

a5051b91f5c7c8c5ed08a2558fe4bb9a
SHA1

87607a53c174f8a417c02d19552026dff0221405
SHA256

55c4dc774aa819a13fb0262e3966634e181ba71bec1ff23d51e8b2555d0735ae
SHA512

5553b28945ba812515c8716b6502325bbf946c0017dd6a3d9cf2504fc8bbc9bb8a622a1f356fdb26985a11fe5964120551ea6f635ec067768d00fd7988dd8b14
SSDEEP

768:I2Mlp5koanBLyLXW0ObQXkvjUWJpy0aTWgia7ARblReaOub1Q:Iz5oBLqXW0IQXkLUWJpy0uTkRblaub1Q

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a5051b91f5c7c8c5ed08a2558fe4bb9a_JaffaCakes118
- Size
  
  40KB
- MD5
  
  a5051b91f5c7c8c5ed08a2558fe4bb9a
- SHA1
  
  87607a53c174f8a417c02d19552026dff0221405
- SHA256
  
  55c4dc774aa819a13fb0262e3966634e181ba71bec1ff23d51e8b2555d0735ae
- SHA512
  
  5553b28945ba812515c8716b6502325bbf946c0017dd6a3d9cf2504fc8bbc9bb8a622a1f356fdb26985a11fe5964120551ea6f635ec067768d00fd7988dd8b14
- SSDEEP
  
  768:I2Mlp5koanBLyLXW0ObQXkvjUWJpy0aTWgia7ARblReaOub1Q:Iz5oBLqXW0IQXkLUWJpy0uTkRblaub1Q
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence